@panphora/clayjs 1.12.1 → 1.12.2

package/dist/clay.standalone.js

@@ -1,4 +1,4 @@
-/* clayjs 1.12.1 standalone build: every clayjs module in one file. https://clayjs.com/offline
+/* clayjs 1.12.2 standalone build: every clayjs module in one file. https://clayjs.com/offline
    Third-party code inside keeps its own license (Sortable MIT, Squire MIT, DOMPurify Apache-2.0 OR MPL-2.0, MicroModal MIT, parse5 MIT): https://clayjs.com/THIRD-PARTY-NOTICES.md */
 (() => {
   var __create = Object.create;
@@ -102,29 +102,29 @@
   });
 
   // src/lib/region-capabilities.js
-  function hasPolicyToken(element, token) {
+  function hasPolicyToken(element, token2) {
     if (!element || element.nodeType !== 1) return false;
     const clay5 = element.getAttribute?.("clay");
-    return !!(clay5 && clay5.split(/\s+/).includes(token) || element.hasAttribute?.(token));
+    return !!(clay5 && clay5.split(/\s+/).includes(token2) || element.hasAttribute?.(token2));
   }
-  function expandsTo(element, token) {
-    if (hasPolicyToken(element, token)) return true;
+  function expandsTo(element, token2) {
+    if (hasPolicyToken(element, token2)) return true;
     for (const [bundle, members] of Object.entries(BUNDLES)) {
-      if (members.includes(token) && hasPolicyToken(element, bundle)) return true;
+      if (members.includes(token2) && hasPolicyToken(element, bundle)) return true;
     }
     return false;
   }
   function capabilitySelector(capability) {
     const definition = CAPABILITIES[capability];
     if (!definition) throw new Error(`Unknown region capability: ${capability}`);
-    return [...definition.tokens, ...definition.bundles].flatMap((token) => [`[clay~="${token}"]`, `[${token}]`]).join(", ");
+    return [...definition.tokens, ...definition.bundles].flatMap((token2) => [`[clay~="${token2}"]`, `[${token2}]`]).join(", ");
   }
   function closestWithCapability(node, capability) {
     let element = node && node.nodeType === 1 ? node : node?.parentElement;
     while (element && element.nodeType === 1) {
       const definition = CAPABILITIES[capability];
       if (!definition) throw new Error(`Unknown region capability: ${capability}`);
-      if (definition.tokens.some((token) => expandsTo(element, token)) || definition.bundles.some((bundle) => hasPolicyToken(element, bundle))) return element;
+      if (definition.tokens.some((token2) => expandsTo(element, token2)) || definition.bundles.some((bundle) => hasPolicyToken(element, bundle))) return element;
       element = element.parentElement;
     }
     return null;
@@ -569,10 +569,10 @@
     strictestPolicy: () => strictestPolicy,
     windowRegionShape: () => windowRegionShape
   });
-  function addRegionToken(el5, token) {
+  function addRegionToken(el5, token2) {
     const tokens = new Set((el5.getAttribute("clay") || "").trim().split(/\s+/).filter(Boolean));
-    if (tokens.has(token)) return;
-    tokens.add(token);
+    if (tokens.has(token2)) return;
+    tokens.add(token2);
     el5.setAttribute("clay", Array.from(tokens).join(" "));
   }
   function isSnapshotRemoved(node) {
@@ -922,14 +922,14 @@
           }
           this._log("Resumed", this._pauseDepth);
         },
-        _log(message, data = null, type = "log") {
+        _log(message2, data = null, type = "log") {
           if (!this.debug) return;
           const timestamp = (/* @__PURE__ */ new Date()).toISOString();
           const prefix = `[Mutation ${timestamp}]`;
           if (data) {
-            console[type](prefix, message, data);
+            console[type](prefix, message2, data);
           } else {
-            console[type](prefix, message);
+            console[type](prefix, message2);
           }
         },
         _notify(type, changes2, onlyNonPausable = false) {
@@ -1526,7 +1526,7 @@
   }
   function hasOwnCapability(element, capability) {
     const definition = CAPABILITIES[capability];
-    return definition.tokens.some((token) => expandsTo(element, token)) || definition.bundles.some((bundle) => hasPolicyToken(element, bundle));
+    return definition.tokens.some((token2) => expandsTo(element, token2)) || definition.bundles.some((bundle) => hasPolicyToken(element, bundle));
   }
   function pairTree(source3, copy2, maps, drop) {
     if (source3.nodeType === 1 && drop(source3)) {
@@ -2875,8 +2875,8 @@
   }
   async function fetchMeta() {
     if (!/^https?:$/.test(window.location.protocol)) return settle("none");
-    const token = saveToken();
-    const path = token ? `${META_PATH}/${token}` : META_PATH;
+    const token2 = saveToken();
+    const path = token2 ? `${META_PATH}/${token2}` : META_PATH;
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), META_TIMEOUT_MS);
     try {
@@ -2885,7 +2885,7 @@
         // Same rule as the save lane. The token IS the credential, and a host that
         // mints per-document tokens must never send Access-Control-Allow-Credentials
         // back, so asking for cookies gets the answer blocked before it is read.
-        credentials: token ? "omit" : "same-origin",
+        credentials: token2 ? "omit" : "same-origin",
         headers: { "Document-URL": window.location.href },
         cache: "no-store",
         // A redirect is not an answer (§5), and following one would send the
@@ -3162,11 +3162,11 @@
     return { ok: false, msg, msgType: "skipped", code: null, etag: null };
   }
   function buildSaveRequest(content, userDriven, signal, saveId, etag, keepalive = false) {
-    const token = saveToken();
-    const path = token ? `${SAVE_PATH}/${token}` : SAVE_PATH;
+    const token2 = saveToken();
+    const path = token2 ? `${SAVE_PATH}/${token2}` : SAVE_PATH;
     const options = {
       method: "POST",
-      credentials: token ? "omit" : "same-origin",
+      credentials: token2 ? "omit" : "same-origin",
       signal,
       headers: {
         "Document-URL": window.location.href,
@@ -3204,11 +3204,11 @@
     return { ok: status >= 200 && status < 300, status, statusText: status === 200 ? "OK" : "Insufficient Storage", text: () => Promise.resolve(text) };
   }
   function sendToDraftStore(content) {
-    const send3 = draftTransport();
-    if (!send3) return Promise.resolve(draftResponse(503, { msg: "Saving in this browser is not ready yet", msgType: "error", code: "draft-not-ready" }));
+    const send4 = draftTransport();
+    if (!send4) return Promise.resolve(draftResponse(503, { msg: "Saving in this browser is not ready yet", msgType: "error", code: "draft-not-ready" }));
     return Promise.resolve().then(() => {
       try {
-        send3(content);
+        send4(content);
         return draftResponse(200, { msg: "Saved in this browser", msgType: "success" });
       } catch (error) {
         return draftResponse(507, { msg: "Couldn't save in this browser. Storage is full or turned off.", msgType: "error", code: error.code || "draft-storage" });
@@ -3485,12 +3485,12 @@
     changes++;
     scheduleAnnounce();
   }
-  function gateClearIfUnchanged(token) {
-    if (!token) return;
-    if (changes === token.gen) {
-      clearedAt = token.gen;
+  function gateClearIfUnchanged(token2) {
+    if (!token2) return;
+    if (changes === token2.gen) {
+      clearedAt = token2.gen;
     }
-    for (const [el5, sig] of token.probe) {
+    for (const [el5, sig] of token2.probe) {
       if (controlSignature(el5) === sig) probeCache.set(el5, sig);
     }
     scheduleAnnounce();
@@ -4069,8 +4069,8 @@
       for (const name of events) document.addEventListener(name, onSettle);
     });
   }
-  function flushError(message, state2) {
-    return Object.assign(new Error(message), { state: state2 });
+  function flushError(message2, state2) {
+    return Object.assign(new Error(message2), { state: state2 });
   }
   function nextEvent(name, deadline) {
     return new Promise((resolve, reject) => {
@@ -4110,9 +4110,9 @@
     for (let attempt = 0; attempt < 4; attempt++) {
       if (isSaveInProgress()) await settled(deadline);
       if (isSaveConflicted()) throw flushError("This document has a conflict to resolve.", "conflict");
-      const token = gateCaptureToken();
+      const token2 = gateCaptureToken();
       if (!bytesUnsaved()) {
-        gateClearIfUnchanged(token);
+        gateClearIfUnchanged(token2);
         if (hasUnsavedState()) throw flushError("This document has unsaved work a save cannot write.", "blocked");
         return { state: saved2 ? "saved" : "clean", etag: etag ?? lastSeenEtag() };
       }
@@ -4354,8 +4354,8 @@
     setPageDataLiveSync: () => setPageDataLiveSync,
     writeData: () => writeData
   });
-  function refusal(code, message, details) {
-    const error = new Error(message);
+  function refusal(code, message2, details) {
+    const error = new Error(message2);
     error.code = code;
     error.details = details;
     return error;
@@ -4371,8 +4371,8 @@
       body = await responseBody(response) || {};
     } catch {
     }
-    const message = body.message || body.error || response.statusText || `Request failed (${response.status})`;
-    const error = new Error(message);
+    const message2 = body.message || body.error || response.statusText || `Request failed (${response.status})`;
+    const error = new Error(message2);
     error.status = response.status;
     error.error = body.error;
     error.details = body.details;
@@ -4468,7 +4468,7 @@
   }
   function createPageDataApi({
     supports = hostSupports,
-    token = saveToken,
+    token: token2 = saveToken,
     fetchImpl = (...args) => fetch(...args),
     getLocation = () => window.location,
     eventTarget = document,
@@ -4570,7 +4570,7 @@
           "Content-Type": "application/json",
           "If-Match": match
         };
-        const currentToken = token();
+        const currentToken = token2();
         if (currentToken) headers["Save-Token"] = currentToken;
         const body = JSON.stringify(values);
         waiter = syncWaiter(eventTarget, syncTimeoutMs);
@@ -13610,8 +13610,8 @@
       RETRY_MS = 2e3;
       EVENTS = ["focusin", "focusout", "selectionchange", "clay:sync-applied", "clay:workspace-background", "clay:workspace-foreground"];
       EditingSender = class {
-        constructor({ send: send3, now: now3 = () => Date.now() }) {
-          this.send = send3;
+        constructor({ send: send4, now: now3 = () => Date.now() }) {
+          this.send = send4;
           this.now = now3;
           this.others = false;
           this.background = false;
@@ -14149,13 +14149,13 @@
         get unresolvedConflicts() {
           return conflicts.list().filter((c2) => c2.kind !== "apply-incomplete");
         }
-        _log(message, data = null) {
+        _log(message2, data = null) {
           if (!this.debug) return;
           const prefix = `[LiveSync ${(/* @__PURE__ */ new Date()).toISOString()}]`;
           if (data !== null) {
-            console.log(prefix, message, data);
+            console.log(prefix, message2, data);
           } else {
-            console.log(prefix, message);
+            console.log(prefix, message2);
           }
         }
         /**
@@ -15085,7 +15085,7 @@
             ...extra
           };
           const dirty = this.lane === "live" && pageMaybeDirty();
-          const token = gateCaptureToken();
+          const token2 = gateCaptureToken();
           let pending4;
           let localRoot = null;
           let applyId = null;
@@ -15150,7 +15150,7 @@
             }
             throw err;
           }
-          const typedDuringWait = gateCaptureToken().gen !== token.gen;
+          const typedDuringWait = gateCaptureToken().gen !== token2.gen;
           let conflictIds;
           try {
             lineageCapture.prepareComplete(report2, conflicts.list());
@@ -15159,7 +15159,7 @@
             lineageCapture.finish(conflicts.list());
           }
           if (dirty && !report2.localDiverged) {
-            gateClearIfUnchanged(token);
+            gateClearIfUnchanged(token2);
           }
           const mapIds = new Set(isIdMap(identityMap) ? Object.values(identityMap) : []);
           for (const [el5, id2] of report2.identities) {
@@ -16477,12 +16477,12 @@
   function drawBar(m2) {
     const n2 = m2 === "failed" ? failures().length : losses().length;
     const bar2 = bevelSurface("div", ["display:flex", "flex-wrap:wrap", "align-items:center", "gap:10px 12px", "padding:8px 8px 8px 14px", "width:max-content", "max-width:calc(100vw - 24px)"]);
-    const message = barMessage(m2, n2);
-    if (message !== lastAnnounced) {
+    const message2 = barMessage(m2, n2);
+    if (message2 !== lastAnnounced) {
       bar2.setAttribute("role", m2 === "refused" ? "alert" : "status");
-      lastAnnounced = message;
+      lastAnnounced = message2;
     }
-    bar2.append(dot(), bevelText("span", [], message), key(bevelButton("Review", { onClick: openPanel }), "review"));
+    bar2.append(dot(), bevelText("span", [], message2), key(bevelButton("Review", { onClick: openPanel }), "review"));
     return bar2;
   }
   function action(label, name, { variant = "default", onClick: onClick2, push = false } = {}) {
@@ -16806,8 +16806,8 @@
       return;
     }
     if (Date.now() - armedAt < DOUBLE_PRESS_MS) return;
-    const token = armed;
-    const current4 = () => armed === token && token.refusalGeneration === refusalGeneration && token.ledgerRevision === ledgerRevision && token.dirtyGeneration === gateCaptureToken().gen;
+    const token2 = armed;
+    const current4 = () => armed === token2 && token2.refusalGeneration === refusalGeneration && token2.ledgerRevision === ledgerRevision && token2.dirtyGeneration === gateCaptureToken().gen;
     if (!reloadAfterDiscard({ isCurrent: current4, reload: () => window.location.reload() })) {
       disarm();
       armLost = true;
@@ -22888,8 +22888,8 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
     const retired = /* @__PURE__ */ new Set();
     const kept = /* @__PURE__ */ new Map();
     let mirror = { epoch: null, seq: 0, sequencer: null, closedBy: null, stale: false, seen: /* @__PURE__ */ new Map(), stores: /* @__PURE__ */ new Map() };
-    function post(message) {
-      channel?.postMessage({ v: VERSION, ...message });
+    function post2(message2) {
+      channel?.postMessage({ v: VERSION, ...message2 });
     }
     function pushLog(m2, entry) {
       entry.bytes = encoder2.encode(JSON.stringify(entry.ops)).length;
@@ -22981,7 +22981,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
     }
     function announce() {
       const state2 = roomState();
-      post({ type: "data-state", state: state2 });
+      post2({ type: "data-state", state: state2 });
       handlers2.state(state2);
     }
     function renewEpoch() {
@@ -23040,7 +23040,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
     }
     function closeRoom() {
       if (!room) return;
-      post({ type: "closed", from: clientId, state: roomState() });
+      post2({ type: "closed", from: clientId, state: roomState() });
       room = null;
       releaseLock?.();
       releaseLock = null;
@@ -23100,7 +23100,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
       room.lastN.set(nKey, { n: frame.n, seq: room.seq });
       const data = { epoch: room.epoch, seq: room.seq, name: frame.name, ops, from, n: frame.n };
       advance(data);
-      post({ type: "data", data });
+      post2({ type: "data", data });
       handlers2.frame(cloneJson(data));
       return { status: 200, body: { seq: room.seq, epoch: room.epoch }, retryAfter: 0 };
     }
@@ -23186,7 +23186,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
       if (changed2) announce();
       else tellLanded(moved);
     }
-    function request(message) {
+    function request(message2) {
       return new Promise((resolve) => {
         const id2 = ++rid;
         const timer = setTimeout(() => {
@@ -23194,14 +23194,14 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
           ownPosts.delete(id2);
           resolve(null);
         }, REQUEST_MS);
-        if (message.type === "post") ownPosts.set(id2, mirror.sequencer);
+        if (message2.type === "post") ownPosts.set(id2, mirror.sequencer);
         waiting.set(id2, (result2) => {
           clearTimeout(timer);
           waiting.delete(id2);
           ownPosts.delete(id2);
           resolve(result2);
         });
-        post({ ...message, from: clientId, rid: id2 });
+        post2({ ...message2, from: clientId, rid: id2 });
       });
     }
     function onData(data) {
@@ -23236,7 +23236,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
         return;
       }
       if (!room && m2.type === "data-state" && m2.state?.epoch === mirror.epoch && m2.state.writer !== mirror.sequencer && Number.isInteger(m2.state.seq) && m2.state.seq < mirror.seq) {
-        post({ type: "forked", epoch: mirror.epoch, to: m2.state.writer });
+        post2({ type: "forked", epoch: mirror.epoch, to: m2.state.writer });
         return;
       }
       if (m2.type === "forked") {
@@ -23254,9 +23254,9 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
       } else if (m2.type === "answer") {
         if (m2.to === clientId) waiting.get(m2.rid)?.(m2.result);
       } else if (room && m2.type === "post") {
-        if (m2.epoch === room.epoch) post({ type: "answer", to: m2.from, rid: m2.rid, result: roomApply(m2.from, m2.frame) });
+        if (m2.epoch === room.epoch) post2({ type: "answer", to: m2.from, rid: m2.rid, result: roomApply(m2.from, m2.frame) });
       } else if (room && m2.type === "state-request") {
-        post({ type: "answer", to: m2.from, rid: m2.rid, result: roomState() });
+        post2({ type: "answer", to: m2.from, rid: m2.rid, result: roomState() });
       }
     }
     function onPageHide() {
@@ -23317,7 +23317,7 @@ In order to be iterable, non-array objects must have a [Symbol.iterator]() metho
       landed(name, at4) {
         if (stopped || !at4) return;
         if (applyLanded(name, at4)) tellLanded([name]);
-        post({ type: "landed", name, at: { epoch: at4.epoch, seq: at4.seq } });
+        post2({ type: "landed", name, at: { epoch: at4.epoch, seq: at4.seq } });
       },
       get isSequencer() {
         return room !== null;
@@ -32069,8 +32069,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
   }
   function send(file, { onProgress, signal }) {
     return new Promise((resolve) => {
-      const token = saveToken();
-      const path = token ? `${UPLOAD_PATH}/${token}` : UPLOAD_PATH;
+      const token2 = saveToken();
+      const path = token2 ? `${UPLOAD_PATH}/${token2}` : UPLOAD_PATH;
       const url = new URL(path, window.location.origin).href;
       const xhr = new XMLHttpRequest();
       let settled2 = false;
@@ -32766,8 +32766,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     return new URL(path, window.location.origin).href;
   }
   function wireToken() {
-    const token = saveToken();
-    return typeof token === "string" && token !== "" ? token : null;
+    const token2 = saveToken();
+    return typeof token2 === "string" && token2 !== "" ? token2 : null;
   }
   function view2(rec) {
     return {
@@ -32800,12 +32800,12 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     rec.state = state2;
     emit3(rec);
   }
-  function arm(rec, ms2, message, { cancelFirst = false, errorCode = null } = {}) {
+  function arm(rec, ms2, message2, { cancelFirst = false, errorCode = null } = {}) {
     clearTimeout(rec.timer);
     rec.timer = setTimeout(() => {
       rec.timer = null;
       if (cancelFirst) postCancel(rec);
-      finish(rec, "error", message, { errorCode, errorSource: "client" });
+      finish(rec, "error", message2, { errorCode, errorSource: "client" });
     }, ms2);
   }
   function disarm2(rec) {
@@ -32821,8 +32821,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
   }
   function openStream() {
     if (streamReady) return streamReady;
-    const token = wireToken();
-    const path = `/_/wire/subscribe?page-url=${encodeURIComponent(window.location.href)}` + (token ? `&token=${encodeURIComponent(token)}` : "");
+    const token2 = wireToken();
+    const path = `/_/wire/subscribe?page-url=${encodeURIComponent(window.location.href)}` + (token2 ? `&token=${encodeURIComponent(token2)}` : "");
     stream = new EventSource(wireURL(path));
     stream.onmessage = (event) => {
       let frame;
@@ -33041,8 +33041,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       "Content-Type": "application/json",
       "Page-URL": window.location.href
     };
-    const token = wireToken();
-    if (token) headers["Save-Token"] = token;
+    const token2 = wireToken();
+    if (token2) headers["Save-Token"] = token2;
     const response = await fetch(wireURL("/_/wire/send"), {
       method: "POST",
       headers,
@@ -33272,6 +33272,183 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     }
   });
 
+  // src/dom/form-data.js
+  function getDataFromForm(container) {
+    const formData = {};
+    const processElement = (elem) => {
+      const name = elem.getAttribute("name");
+      const value = elem.value ?? elem.getAttribute("value");
+      if (!name || elem.disabled) return;
+      switch (elem.type) {
+        case "checkbox":
+          if (!formData[name]) {
+            formData[name] = [];
+          }
+          if (elem.checked) {
+            formData[name].push(value);
+          }
+          break;
+        case "radio":
+          if (elem.checked) {
+            formData[name] = value;
+          }
+          break;
+        case "select-multiple":
+          formData[name] = Array.from(elem.selectedOptions, (option) => option.value);
+          break;
+        case "button":
+        case "submit":
+        case "reset":
+          if (name && value) {
+            formData[name] = value;
+          }
+          break;
+        default:
+          formData[name] = value;
+      }
+    };
+    if (container instanceof HTMLFormElement) {
+      Array.from(container.elements).forEach(processElement);
+    } else {
+      if (container.hasAttribute("name")) {
+        processElement(container);
+      }
+      const elements = container.querySelectorAll("[name]");
+      elements.forEach(processElement);
+    }
+    return formData;
+  }
+  var form_data_default;
+  var init_form_data = __esm({
+    "src/dom/form-data.js"() {
+      form_data_default = getDataFromForm;
+    }
+  });
+
+  // src/plugins/message.js
+  var message_exports = {};
+  __export(message_exports, {
+    default: () => message_default,
+    message: () => message,
+    send: () => send3
+  });
+  function fetchToken() {
+    if (!tokenRequest) {
+      tokenRequest = fetch(TOKEN_PATH, { credentials: "omit", cache: "no-store" }).then((res) => res.ok ? res.json() : null).then((body) => {
+        if (body && typeof body.token === "string") {
+          token = body.token;
+          tokenAt = Date.now();
+        }
+      }).catch(() => {
+      }).finally(() => {
+        tokenRequest = null;
+      });
+    }
+    return tokenRequest;
+  }
+  async function takeToken() {
+    if (!token || Date.now() - tokenAt > TOKEN_MAX_AGE_MS) await fetchToken();
+    const taken = token;
+    token = null;
+    return taken;
+  }
+  function signals() {
+    return { webdriver: navigator.webdriver === true, trusted: { ...trusted } };
+  }
+  function isMessageForm(form) {
+    if (!(form instanceof HTMLFormElement)) return false;
+    if (form.hasAttribute("message-form")) return true;
+    const action2 = form.getAttribute("action");
+    if (!action2) return false;
+    try {
+      const url = new URL(action2, window.location.href);
+      return url.origin === window.location.origin && url.pathname === MESSAGE_PATH;
+    } catch {
+      return false;
+    }
+  }
+  async function send3(data = {}) {
+    const result2 = await post(data);
+    if (result2.code === "form-token") return post(data);
+    return result2;
+  }
+  async function post(data) {
+    const formToken = await takeToken();
+    let res;
+    try {
+      res = await fetch(MESSAGE_PATH, {
+        method: "POST",
+        // A signed-in owner testing their own form must not trip the host's CSRF
+        // guard, and the message never needs the visitor's cookies.
+        credentials: "omit",
+        headers: { "Content-Type": "application/json", "Document-URL": window.location.href },
+        body: JSON.stringify({ ...data, formToken, formSignals: signals() })
+      });
+    } catch {
+      return { ok: false, error: "The message couldn't be sent. Check your connection and try again." };
+    }
+    const body = await res.json().catch(() => null);
+    if (res.ok) return body ? { ok: true, error: null } : { ok: false, error: "This page can't send messages." };
+    if (!body) return { ok: false, error: `The message couldn't be sent (${res.status}).` };
+    const error = body.error || body.msg || `The message couldn't be sent (${res.status}).`;
+    return body.code === "form-token" ? { ok: false, error, code: "form-token" } : { ok: false, error };
+  }
+  async function onSubmit(event) {
+    const form = event.target;
+    if (event.defaultPrevented || !isMessageForm(form)) return;
+    event.preventDefault();
+    if (sending.has(form)) return;
+    sending.add(form);
+    try {
+      const result2 = await send3(form_data_default(form));
+      if (result2.ok) form.reset();
+      const outcome2 = new CustomEvent(result2.ok ? "clay:message-sent" : "clay:message-failed", {
+        bubbles: true,
+        cancelable: true,
+        detail: result2
+      });
+      if (!form.dispatchEvent(outcome2)) return;
+      const toast3 = window.clay?.toast;
+      if (!toast3) return;
+      if (result2.ok) toast3(form.getAttribute("message-form") || "Sent", "success");
+      else toast3(result2.error, "error");
+    } finally {
+      sending.delete(form);
+    }
+  }
+  function warmToken(event) {
+    if (token || tokenRequest) return;
+    const form = event.target?.closest?.("form");
+    if (form && isMessageForm(form)) fetchToken();
+  }
+  var MESSAGE_PATH, TOKEN_PATH, TOKEN_MAX_AGE_MS, TRUSTED_EVENTS, trusted, token, tokenAt, tokenRequest, sending, message, message_default;
+  var init_message = __esm({
+    "src/plugins/message.js"() {
+      init_form_data();
+      MESSAGE_PATH = "/_/message";
+      TOKEN_PATH = "/_/form-token";
+      TOKEN_MAX_AGE_MS = 90 * 60 * 1e3;
+      TRUSTED_EVENTS = ["click", "keydown", "pointerdown", "touchstart", "input", "change"];
+      trusted = Object.fromEntries(TRUSTED_EVENTS.map((type) => [type, 0]));
+      token = null;
+      tokenAt = 0;
+      tokenRequest = null;
+      sending = /* @__PURE__ */ new WeakSet();
+      if (typeof document !== "undefined") {
+        for (const type of TRUSTED_EVENTS) {
+          document.addEventListener(type, (event) => {
+            if (event.isTrusted) trusted[type]++;
+          }, { capture: true, passive: true });
+        }
+        document.addEventListener("focusin", warmToken, true);
+        document.addEventListener("input", warmToken, true);
+        document.addEventListener("submit", onSubmit);
+      }
+      message = { send: send3 };
+      message_default = message;
+    }
+  });
+
   // src/plugins/ai-edit.js
   var ai_edit_exports = {};
   __export(ai_edit_exports, {
@@ -33519,11 +33696,11 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     if (model2) parts.push(`(${model2})`);
     return parts.join(" ");
   }
-  function onError(message) {
+  function onError(message2) {
     if (!session) return;
     revertSession();
     showBar("error");
-    setBarStatus(message, "warn");
+    setBarStatus(message2, "warn");
   }
   function revertSession() {
     const s2 = session;
@@ -35264,8 +35441,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     } };
     return w2;
   }
-  function Ge2(e) {
-    let t = e && e.ownerDocument ? e.ownerDocument : e, n2 = j(G, t, "api");
+  function Xe2(e) {
+    let t = e && e.ownerDocument ? e.ownerDocument : e, n2 = j(X, t, "api");
     if (!n2) throw new R.NoRulesTag("api");
     return n2.rules;
   }
@@ -35347,29 +35524,29 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     }
     return e instanceof R.WriteRefused ? e.details = e.refusals : e instanceof R.WriteRejected ? e.details = { unknownKeys: e.unknownKeys, unmatched: e.unmatched } : e instanceof R.ShapeMismatch ? e.details = e.mismatches : Array.isArray(e.path) ? e.details = { path: e.path } : typeof e.target == "string" ? e.details = { target: e.target } : e.token !== void 0 ? e.details = { token: e.token } : e.version !== void 0 ? e.details = { version: e.version } : e.details = {}, e;
   }
-  function Xe2(e, t) {
+  function Ge2(e, t) {
     let n2 = Te2(e) ? e : document, r = Te2(e) ? t : e;
-    return r === void 0 ? C(M(n2), n2, Ge2(n2)) : ne2.bind(n2, r).get();
+    return r === void 0 ? C(M(n2), n2, Xe2(n2)) : ne2.bind(n2, r).get();
   }
   function Ye2(e, t, n2) {
     try {
       if (!Te2(e)) throw new Error("hyper-html-api: applyData(root, data, source?) needs a DOM root as the first argument.");
-      let r = n2 === void 0 ? Ge2(e) : ne2.bind(e, n2).rules;
+      let r = n2 === void 0 ? Xe2(e) : ne2.bind(e, n2).rules;
       Wt2(e, r, t);
     } catch (r) {
       throw vt2(r);
     }
     return e;
   }
-  var Qe2, et2, X, Y, re2, $2, Ee2, R, k, W2, L2, P2, v, N, B, H, Z2, oe2, se2, Ne2, Pe2, Tt2, _e2, ee2, wt2, De2, me2, Ot2, xt2, Ct2, It2, x, G, ne2, Te2;
+  var Qe2, et2, G, Y, re2, $2, Ee2, R, k, W2, L2, P2, v, N, B, H, Z2, oe2, se2, Ne2, Pe2, Tt2, _e2, ee2, wt2, De2, me2, Ot2, xt2, Ct2, It2, x, X, ne2, Te2;
   var init_hyper_html_api_data_vendor = __esm({
     "src/vendor/hyper-html-api-data.vendor.js"() {
       Qe2 = Object.defineProperty;
       et2 = (e, t) => {
         for (var n2 in t) Qe2(e, n2, { get: t[n2], enumerable: true });
       };
-      X = ["textContent", "innerText", "innerHTML", "outerHTML", "value", "checked", "selected", "disabled", "readOnly", "type", "tagName", "nodeName", "nodeType", "nodeValue", "childElementCount", "id", "className", "classList", "baseURI", "offsetWidth", "offsetHeight", "clientWidth", "clientHeight", "scrollWidth", "scrollHeight", "dataset", "currentSrc", "duration", "paused", "title", "documentURI", "contentType"];
-      Y = new Set(X);
+      G = ["textContent", "innerText", "innerHTML", "outerHTML", "value", "checked", "selected", "disabled", "readOnly", "type", "tagName", "nodeName", "nodeType", "nodeValue", "childElementCount", "id", "className", "classList", "baseURI", "offsetWidth", "offsetHeight", "clientWidth", "clientHeight", "scrollWidth", "scrollHeight", "dataset", "currentSrc", "duration", "paused", "title", "documentURI", "contentType"];
+      Y = new Set(G);
       re2 = /* @__PURE__ */ new Set(["textContent", "innerText", "innerHTML", "value", "checked", "selected", "disabled", "readOnly", "type", "id", "className", "title"]);
       $2 = /* @__PURE__ */ new Set(["tagName", "nodeName", "nodeType", "nodeValue", "childElementCount", "classList", "baseURI", "documentURI", "contentType", "offsetWidth", "offsetHeight", "clientWidth", "clientHeight", "scrollWidth", "scrollHeight", "currentSrc", "duration", "paused", "dataset"]);
       Ee2 = /* @__PURE__ */ new Set(["checked", "selected", "disabled", "readOnly", "paused"]);
@@ -35500,15 +35677,15 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       }, sameNode(e, t) {
         return e === t;
       } };
-      G = x;
-      ne2 = { extract: (e, t, n2 = {}) => C(M(e, n2), e, t, n2), apply: (e, t, n2, r = {}) => I2(M(e, { ...r, _write: true }), e, t, n2, r), findRulesIn: (e, t) => j(G, e, t), findRules: (e, t) => Ae2(G, e, t), bind: (e, t, n2 = {}) => {
-        let r = Ae2(G, e, t);
+      X = x;
+      ne2 = { extract: (e, t, n2 = {}) => C(M(e, n2), e, t, n2), apply: (e, t, n2, r = {}) => I2(M(e, { ...r, _write: true }), e, t, n2, r), findRulesIn: (e, t) => j(X, e, t), findRules: (e, t) => Ae2(X, e, t), bind: (e, t, n2 = {}) => {
+        let r = Ae2(X, e, t);
         if (!r) {
           let i2 = typeof t == "string" ? `data-rules-name~="${t}"` : "the provided rules object";
           throw new Error(`hyper-html-api: could not resolve rules for ${i2}`);
         }
         return { ...r, get: () => C(M(e, n2), e, r.rules, n2), set: (i2) => I2(M(e, { ...n2, _write: true }), e, r.rules, i2, n2) };
-      }, parseStrict: de2, parseRelaxed: z2, ruleAttrIndex: b, splitRule: le2, errors: R, DOM_PROPERTIES: X };
+      }, parseStrict: de2, parseRelaxed: z2, ruleAttrIndex: b, splitRule: le2, errors: R, DOM_PROPERTIES: G };
       Te2 = (e) => !!e && typeof e.nodeType == "number";
     }
   });
@@ -35615,12 +35792,12 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       return { raw, record: parse2(raw) };
     }
     function live2() {
-      return Xe2(doc, rules);
+      return Ge2(doc, rules);
     }
     function captured() {
       const getHTML = window.clay?.getHTML;
       if (typeof getHTML !== "function") return live2();
-      return Xe2(new DOMParser().parseFromString(getHTML.call(window.clay), "text/html"), rules);
+      return Ge2(new DOMParser().parseFromString(getHTML.call(window.clay), "text/html"), rules);
     }
     function storedKeys() {
       try {
@@ -35695,7 +35872,7 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
           dropped.push(...failing);
           continue;
         }
-        const got = Xe2(trial, rules);
+        const got = Ge2(trial, rules);
         const misfits = Object.keys(wanted).filter((name) => !fitsInto(wanted[name], got[name]));
         if (!misfits.length) return { data: wanted, dropped };
         for (const name of misfits) delete wanted[name];
@@ -35773,7 +35950,7 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       if (unparked != null && park(unparked, { keepSlot: true }) === null) {
         throw storageFailure(doc, new Error("an earlier saved copy could not be kept aside"));
       }
-      const mine = Xe2(new DOMParser().parseFromString(html, "text/html"), rules);
+      const mine = Ge2(new DOMParser().parseFromString(html, "text/html"), rules);
       const current4 = getRaw();
       if (fitsInto(mine, base) && (current4 === lastRaw || current4 == null)) {
         setDraftStoreFailed(false);
@@ -35895,11 +36072,6 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     if (path && !/\.(html|htmlclay)$/.test(path)) path += ".html";
     return `/_/download${path}?as=htmlclay${src ? `&src=${encodeURIComponent(src)}` : ""}`;
   }
-  function signupTag(slot2, template) {
-    const explicit = template?.getAttribute("signup-tag");
-    const name = explicit || slot2.replace(/-v\d+$/, "");
-    return `app-${name}`.slice(0, 50);
-  }
   var SRC;
   var init_source = __esm({
     "src/plugins/visitor-drafts/source.js"() {
@@ -36004,6 +36176,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
 .hcp .hcp-btn--primary:hover { background: color-mix(in srgb, var(--hcp-ink), var(--hcp-ground) 12%); color: var(--hcp-ground); }
 
 .hcp-dock { display: flex; align-items: stretch; box-shadow: 0 6px 16px -8px rgba(43, 36, 27, .45); }
+.hcp:not([data-hcp-arrived]) .hcp-dock { animation: hcp-arrive 2.4s cubic-bezier(.16, 1, .3, 1) 3s both; }
+@keyframes hcp-arrive { from { transform: translateX(calc(100% + 48px)); } to { transform: none; } }
 .hcp-tab { font-size: 13.5px; padding: 0 12px 0 10px; }
 .hcp-tab svg { color: var(--hcp-brass); }
 .hcp-dock .hcp-x {
@@ -36064,22 +36238,7 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
 .hcp-file small { display: block; font-size: 12px; color: var(--hcp-muted); line-height: 1.4; }
 .hcp-actions { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 14px; }
 .hcp-actions .hcp-btn--primary { flex: 1 1 auto; }
-.hcp-signup { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--hcp-line); }
-.hcp-signup label { display: block; font-size: 13px; line-height: 1.45; color: var(--hcp-ink-2); margin-bottom: 8px; }
-.hcp-signup-row { display: flex; gap: 8px; }
-.hcp-signup-row[hidden] { display: none; }
-.hcp-signup input[type="email"] {
-  flex: 1 1 auto; min-width: 0; height: 34px; padding: 0 10px; margin: 0;
-  font: 14px var(--hcp-sans); color: var(--hcp-ink); background: var(--hcp-surface);
-  border: 1px solid var(--hcp-line-2); border-radius: 0; box-shadow: none;
-}
-.hcp-signup input[type="email"]:focus-visible { outline: 2px solid var(--hcp-brass); outline-offset: 1px; }
-.hcp-hp { position: absolute; left: -9999px; width: 1px; height: 1px; opacity: 0; }
-.hcp-msg { margin-top: 8px; font-size: 13px; color: var(--hcp-ink-2); }
-.hcp[data-hcp-reason="error"] .hcp-signup { display: none; }
-@media (max-width: 360px) { .hcp-signup-row { flex-direction: column; } }
-.hcp-foot { margin-top: 12px; display: flex; justify-content: space-between; align-items: center; gap: 10px; }
-.hcp-foot small { font-size: 12px; color: var(--hcp-muted); }
+.hcp-foot { margin-top: 12px; display: flex; justify-content: flex-end; }
 .hcp-quiet {
   min-height: 0; border-radius: 0;
   font-size: 12px; color: var(--hcp-muted); cursor: pointer;
@@ -36101,6 +36260,8 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
 @media (prefers-reduced-motion: reduce) {
   .hcp { transition: none; }
   .hcp[data-hcp-state="card"] .hcp-card { animation: none; }
+  .hcp:not([data-hcp-arrived]) .hcp-dock { animation: hcp-arrive-fade .4s ease 3s both; }
+  @keyframes hcp-arrive-fade { from { opacity: 0; } to { opacity: 1; } }
   .hcp-btn:active > span { translate: none; }
 }
 @media (forced-colors: active) {
@@ -36148,7 +36309,7 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
   });
 
   // src/plugins/visitor-drafts/prompt.js
-  function mountPrompt({ memory, appName, link: link2, tag, source: source3 }) {
+  function mountPrompt({ memory, appName, link: link2 }) {
     if (!document.getElementById("hcp-style")) {
       document.head.insertAdjacentHTML("beforeend", `<link rel="stylesheet" clay="editor-ui" href="${FONT_HREF}">
 <style clay="editor-ui" id="hcp-style">${PROMPT_CSS}</style>`);
@@ -36164,30 +36325,6 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     const OUR_UI = "#hcp, .clay-intro, .clay-owner";
     const linkEl = root3.querySelector("[data-hcp-link]");
     linkEl.href = link2;
-    const signup = root3.querySelector("[data-hcp-signup]");
-    if (signup) {
-      const email = signup.querySelector("#hcp-email");
-      const honey = signup.querySelector(".hcp-hp");
-      const row = signup.querySelector(".hcp-signup-row");
-      const message = signup.querySelector(".hcp-msg");
-      signup.addEventListener("submit", (event) => {
-        event.preventDefault();
-        fetch("/_/newsletter/subscribe", {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          credentials: "same-origin",
-          body: JSON.stringify({ email: email.value.trim(), tags: [tag], source: source3, website: honey.value })
-        }).then((response) => {
-          if (!response.ok) throw new Error("signup failed");
-          row.hidden = true;
-          message.textContent = SIGNUP_COPY.thanks;
-          message.hidden = false;
-        }).catch(() => {
-          message.textContent = SIGNUP_COPY.failed;
-          message.hidden = false;
-        });
-      });
-    }
     if (appName) root3.querySelector("[data-hcp-name]").textContent = appName;
     const tab = root3.querySelector("[data-hcp=open]");
     function set3(state2, reason) {
@@ -36198,6 +36335,7 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       if (state2 === "card") {
         mem.shown = true;
         memory.save();
+        root3.setAttribute("data-hcp-arrived", "");
       }
       lift();
     }
@@ -36293,6 +36431,9 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
         memory.save();
       }
     });
+    root3.addEventListener("animationend", (e) => {
+      if (e.animationName === "hcp-arrive" || e.animationName === "hcp-arrive-fade") root3.setAttribute("data-hcp-arrived", "");
+    });
     root3.addEventListener("keydown", (e) => {
       if (e.key === "Escape" && root3.getAttribute("data-hcp-state") === "card") {
         set3("mini");
@@ -36321,15 +36462,11 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
     if (!mem.shown && (mem.uses || 0) >= USES_TO_SHOW) maybeShow("return");
     return api;
   }
-  var SIGNUP_COPY, FONT_HREF, ASIDE;
+  var FONT_HREF, ASIDE;
   var init_prompt = __esm({
     "src/plugins/visitor-drafts/prompt.js"() {
       init_prompt_style();
       init_bottom_ui();
-      SIGNUP_COPY = {
-        thanks: "Thanks. Check your email for a link to confirm.",
-        failed: "That didn't go through. Check the address and try again."
-      };
       FONT_HREF = "https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@500&family=IBM+Plex+Sans:wght@400;500;600&family=Newsreader:opsz,wght@6..72,500&display=swap";
       ASIDE = `<aside class="hcp" id="hcp" hidden aria-label="Download this app" data-hcp-state="tab" data-hcp-reason="open" sap-ignore clay="editor-ui">
   <section class="hcp-card" id="hcp-card" role="dialog" aria-modal="false" aria-labelledby="hcp-title">
@@ -36341,18 +36478,10 @@ tr.hcms-shell.hcms-inline-ghost { display: table-row; }
       <svg width="20" height="20" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="M224,144v64a8,8,0,0,1-8,8H40a8,8,0,0,1-8-8V144a8,8,0,0,1,16,0v56H208V144a8,8,0,0,1,16,0Zm-101.66,5.66a8,8,0,0,0,11.32,0l40-40a8,8,0,0,0-11.32-11.32L136,124.69V32a8,8,0,0,0-16,0v92.69L93.66,98.34a8,8,0,0,0-11.32,11.32Z"/></svg>
       <div><b class="hcp-name" data-hcp-name>This app</b><small>One file with the whole app and your work in it</small></div>
     </div>
-    <p class="hcp-body">Open it with HTML Clay, a free app for Mac, Windows and Linux. It opens the file in a window and saves every change into it, so your work stays on your computer.</p>
     <div class="hcp-actions">
       <a class="hcp-btn hcp-btn--primary" data-hcp-link href="/_/download?as=htmlclay"><span><svg width="16" height="16" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="M224,144v64a8,8,0,0,1-8,8H40a8,8,0,0,1-8-8V144a8,8,0,0,1,16,0v56H208V144a8,8,0,0,1,16,0Zm-101.66,5.66a8,8,0,0,0,11.32,0l40-40a8,8,0,0,0-11.32-11.32L136,124.69V32a8,8,0,0,0-16,0v92.69L93.66,98.34a8,8,0,0,0-11.32,11.32Z"/></svg>Download free</span></a>
-      <button type="button" class="hcp-btn" data-hcp="minimize"><span>Not now</span></button>
     </div>
-    <form class="hcp-signup" data-hcp-signup novalidate>
-      <label for="hcp-email">I make one of these about every two weeks. Get the next one by email.</label>
-      <div class="hcp-signup-row"><input id="hcp-email" type="email" autocomplete="email" required placeholder="you@example.com"><button type="submit" class="hcp-btn"><span>Send me the next one</span></button></div>
-      <input class="hcp-hp" name="website" tabindex="-1" autocomplete="off" aria-hidden="true">
-      <p class="hcp-msg" role="status" hidden></p>
-    </form>
-    <div class="hcp-foot"><small>Free, and the file is yours to keep.</small><button type="button" class="hcp-quiet" data-hcp="dismiss">Don&rsquo;t show again</button></div>
+    <div class="hcp-foot"><button type="button" class="hcp-quiet" data-hcp="dismiss">Don&rsquo;t show again</button></div>
   </section>
   <div class="hcp-dock">
     <button type="button" class="hcp-btn hcp-tab" data-hcp="open" aria-controls="hcp-card" aria-expanded="false" aria-label="This app is free to keep"><span><svg width="16" height="16" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="M224,144v64a8,8,0,0,1-8,8H40a8,8,0,0,1-8-8V144a8,8,0,0,1,16,0v56H208V144a8,8,0,0,1,16,0Zm-101.66,5.66a8,8,0,0,0,11.32,0l40-40a8,8,0,0,0-11.32-11.32L136,124.69V32a8,8,0,0,0-16,0v92.69L93.66,98.34a8,8,0,0,0-11.32,11.32Z"/></svg><span class="hcp-tab__label">This app is free to keep</span></span></button>
@@ -36735,7 +36864,7 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
         const appName = document.querySelector('meta[name="application-name"]')?.content?.trim() || document.title.split(/:|\s\|\s/)[0].trim() || "This app";
         const template = document.querySelector("template[visitor-intro]");
         const start2 = () => {
-          const prompt = mountPrompt({ memory, appName, link: downloadLink, tag: signupTag(slot, template), source });
+          const prompt = mountPrompt({ memory, appName, link: downloadLink });
           mountIntro({ memory, template, appName, hadDraft: result2.hadDraft });
           if (isOwner) mountOwnerChip();
           document.addEventListener("clay:drafts-store-failed", () => prompt.showError());
@@ -42388,7 +42517,7 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
           };
           var ot4 = (e) => it4(re4({}, "__esModule", { value: true }), e);
           var Vt3 = {};
-          Se4(Vt3, { applyData: () => xe4, default: () => Ft3, engine: () => X3, extractData: () => Oe4 });
+          Se4(Vt3, { applyData: () => xe4, default: () => Ft3, engine: () => G3, extractData: () => Oe4 });
           var Y3 = ["textContent", "innerText", "innerHTML", "outerHTML", "value", "checked", "selected", "disabled", "readOnly", "type", "tagName", "nodeName", "nodeType", "nodeValue", "childElementCount", "id", "className", "classList", "baseURI", "offsetWidth", "offsetHeight", "clientWidth", "clientHeight", "scrollWidth", "scrollHeight", "dataset", "currentSrc", "duration", "paused", "title", "documentURI", "contentType"], Z4 = new Set(Y3), ie4 = /* @__PURE__ */ new Set(["textContent", "innerText", "innerHTML", "value", "checked", "selected", "disabled", "readOnly", "type", "id", "className", "title"]), $4 = /* @__PURE__ */ new Set(["tagName", "nodeName", "nodeType", "nodeValue", "childElementCount", "classList", "baseURI", "documentURI", "contentType", "offsetWidth", "offsetHeight", "clientWidth", "clientHeight", "scrollWidth", "scrollHeight", "currentSrc", "duration", "paused", "dataset"]), be4 = /* @__PURE__ */ new Set(["checked", "selected", "disabled", "readOnly", "paused"]);
           function oe4(e, t) {
             return t == null ? be4.has(e) ? false : "" : be4.has(e) ? t === "false" ? false : !!t : t;
@@ -43230,13 +43359,13 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
               return p2 ? l.importNode(p2, true) : null;
             } };
           }
-          function Xe4(e) {
+          function Ge4(e) {
             return e && e.nodeType === 1 && e.tagName === "SCRIPT" && e.hasAttribute && e.hasAttribute("data-rules-name");
           }
           function $t4(e) {
             return e ? (e.nodeType === 9 || e.nodeType === 11, e) : null;
           }
-          function Ge4(e, t, n2) {
+          function Xe4(e, t, n2) {
             !e || e.nodeType !== 1 || (t === "value" && e.tagName === "INPUT" ? e.value = n2 === null ? "" : n2 : t === "checked" && e.tagName === "INPUT" ? e.checked = n2 !== null : t === "selected" && e.tagName === "OPTION" && (e.selected = n2 !== null));
           }
           function Ye4(e, t) {
@@ -43255,7 +43384,7 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
             let i2 = $t4(e);
             if (!i2 || !i2.querySelectorAll) return [];
             let r = Array.from(i2.querySelectorAll(t));
-            n2.includeRulesTag || (r = r.filter((c2) => !Xe4(c2)));
+            n2.includeRulesTag || (r = r.filter((c2) => !Ge4(c2)));
             let s2 = [];
             n2.skip && s2.push(n2.skip);
             let l = n2.templateAttr === null ? null : n2.templateAttr || "cms-template";
@@ -43275,9 +43404,9 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
             e.textContent = t, Ye4(e, t);
           }, attr(e, t, n2) {
             if (n2 === void 0) return e.hasAttribute && e.hasAttribute(t) ? e.getAttribute(t) : null;
-            e.setAttribute(t, n2), Ge4(e, t, n2);
+            e.setAttribute(t, n2), Xe4(e, t, n2);
           }, removeAttr(e, t) {
-            e && e.removeAttribute && e.removeAttribute(t), Ge4(e, t, null);
+            e && e.removeAttribute && e.removeAttribute(t), Xe4(e, t, null);
           }, prop(e, t, n2) {
             if (n2 === void 0) {
               let i2 = e ? e[t] : void 0;
@@ -43345,7 +43474,7 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
               let h = f2(a);
               if (!h?.querySelectorAll) return [];
               let y2 = o2().query(p2, h);
-              g.includeRulesTag || (y2 = y2.filter((S2) => !Xe4(S2)));
+              g.includeRulesTag || (y2 = y2.filter((S2) => !Ge4(S2)));
               let A2 = [];
               g.skip && A2.push(g.skip);
               let T2 = g.templateAttr === null ? null : g.templateAttr || "cms-template";
@@ -43452,9 +43581,9 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
             } };
             return w2;
           }
-          var G3 = x3;
-          var X3 = { extract: (e, t, n2 = {}) => C3(M3(e, n2), e, t, n2), apply: (e, t, n2, i2 = {}) => I4(M3(e, { ...i2, _write: true }), e, t, n2, i2), findRulesIn: (e, t) => j3(G3, e, t), findRules: (e, t) => Te4(G3, e, t), bind: (e, t, n2 = {}) => {
-            let i2 = Te4(G3, e, t);
+          var X3 = x3;
+          var G3 = { extract: (e, t, n2 = {}) => C3(M3(e, n2), e, t, n2), apply: (e, t, n2, i2 = {}) => I4(M3(e, { ...i2, _write: true }), e, t, n2, i2), findRulesIn: (e, t) => j3(X3, e, t), findRules: (e, t) => Te4(X3, e, t), bind: (e, t, n2 = {}) => {
+            let i2 = Te4(X3, e, t);
             if (!i2) {
               let r = typeof t == "string" ? `data-rules-name~="${t}"` : "the provided rules object";
               throw new Error(`hyper-html-api: could not resolve rules for ${r}`);
@@ -43462,7 +43591,7 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
             return { ...i2, get: () => C3(M3(e, n2), e, i2.rules, n2), set: (r) => I4(M3(e, { ...n2, _write: true }), e, i2.rules, r, n2) };
           }, parseStrict: pe4, parseRelaxed: z3, ruleAttrIndex: b2, splitRule: ce4, errors: R3, DOM_PROPERTIES: Y3 }, we4 = (e) => !!e && typeof e.nodeType == "number";
           function Qe4(e) {
-            let t = e && e.ownerDocument ? e.ownerDocument : e, n2 = j3(G3, t, "api");
+            let t = e && e.ownerDocument ? e.ownerDocument : e, n2 = j3(X3, t, "api");
             if (!n2) throw new R3.NoRulesTag("api");
             return n2.rules;
           }
@@ -43546,19 +43675,19 @@ body:has(> .clay-intro) { height: auto !important; overflow: visible !important;
           }
           function Oe4(e, t) {
             let n2 = we4(e) ? e : document, i2 = we4(e) ? t : e;
-            return i2 === void 0 ? C3(M3(n2), n2, Qe4(n2)) : X3.bind(n2, i2).get();
+            return i2 === void 0 ? C3(M3(n2), n2, Qe4(n2)) : G3.bind(n2, i2).get();
           }
           function xe4(e, t, n2) {
             try {
               if (!we4(e)) throw new Error("hyper-html-api: applyData(root, data, source?) needs a DOM root as the first argument.");
-              let i2 = n2 === void 0 ? Qe4(e) : X3.bind(e, n2).rules;
+              let i2 = n2 === void 0 ? Qe4(e) : G3.bind(e, n2).rules;
               Ut3(e, i2, t);
             } catch (i2) {
               throw zt3(i2);
             }
             return e;
           }
-          var Kt3 = { engine: X3, extractData: Oe4, applyData: xe4 }, Ft3 = Kt3;
+          var Kt3 = { engine: G3, extractData: Oe4, applyData: xe4 }, Ft3 = Kt3;
           return ot4(Vt3);
         })();
         window.clay = window.clay || {};
@@ -46212,7 +46341,7 @@ ${t}` : `"use strict"; return (${t});`;
     document.body.append(box);
     return box;
   }
-  function build3(message, type) {
+  function build3(message2, type) {
     const tone = TONES[type];
     const el5 = bevelSurface("div", [
       "display:flex",
@@ -46230,7 +46359,7 @@ ${t}` : `"use strict"; return (${t});`;
     const glyph = bevelText("span", ["display:inline-grid", "flex:none", "padding-top:1px", `color:${tone.edge}`]);
     glyph.innerHTML = tone.icon;
     protectIcon(glyph.firstElementChild, 16);
-    const text = bevelText("span", ["flex:1 1 auto", "min-width:120px", ...RULES.toastTitle, "overflow-wrap:anywhere"], message);
+    const text = bevelText("span", ["flex:1 1 auto", "min-width:120px", ...RULES.toastTitle, "overflow-wrap:anywhere"], message2);
     el5.append(glyph, text);
     return el5;
   }
@@ -46280,34 +46409,34 @@ ${t}` : `"use strict"; return (${t});`;
       after?.();
     }, 500);
   }
-  function toast2(message, messageType = "success") {
-    const el5 = build3(message, TONES[messageType] ? messageType : "success");
+  function toast2(message2, messageType = "success") {
+    const el5 = build3(message2, TONES[messageType] ? messageType : "success");
     el5.addEventListener("click", () => dismiss2(el5));
     reveal(el5);
     setTimeout(() => dismiss2(el5), 6600);
   }
-  function toastPersistent(message, messageType = "warning") {
-    const existing = activePersistentToasts.get(message);
+  function toastPersistent(message2, messageType = "warning") {
+    const existing = activePersistentToasts.get(message2);
     if (existing) {
       dismiss2(existing);
-      activePersistentToasts.delete(message);
+      activePersistentToasts.delete(message2);
     }
-    const el5 = build3(message, TONES[messageType] ? messageType : "warning");
+    const el5 = build3(message2, TONES[messageType] ? messageType : "warning");
     set(el5, "cursor", "default");
     const close = closeButton((e) => {
       e.stopPropagation();
       dismiss2(el5, () => {
-        if (activePersistentToasts.get(message) === el5) activePersistentToasts.delete(message);
+        if (activePersistentToasts.get(message2) === el5) activePersistentToasts.delete(message2);
       });
     });
     el5.append(close);
-    activePersistentToasts.set(message, el5);
+    activePersistentToasts.set(message2, el5);
     reveal(el5);
   }
-  function dismissPersistent(message) {
-    const el5 = activePersistentToasts.get(message);
+  function dismissPersistent(message2) {
+    const el5 = activePersistentToasts.get(message2);
     if (!el5) return;
-    activePersistentToasts.delete(message);
+    activePersistentToasts.delete(message2);
     dismiss2(el5);
   }
   var TONES, CLOSE_ICON, HIDDEN2, activePersistentToasts, toast_default;
@@ -47646,6 +47775,9 @@ ${t}` : `"use strict"; return (${t});`;
     // Who is editing and who wrote what. Not editOnly: a reader still sees names.
     people: { path: "plugins/people.js", editOnly: false, default: false },
     wire: { path: "plugins/wire.js", editOnly: false, default: false },
+    // A visitor's contact form to the document's owner. Not editOnly: visitors are
+    // who send messages.
+    message: { path: "plugins/message.js", editOnly: false, default: false },
     // Edit mode only: the AI comment box is an editing gesture. Opt in with
     // `plugins=ai-edit`; it stays dormant on any host that does not list a ready
     // `ai-edit` helper.
@@ -47694,18 +47826,19 @@ ${t}` : `"use strict"; return (${t});`;
     "plugins/upload.js": () => Promise.resolve().then(() => (init_upload(), upload_exports)),
     "plugins/people.js": () => Promise.resolve().then(() => (init_people(), people_exports)),
     "plugins/wire.js": () => Promise.resolve().then(() => (init_wire(), wire_exports)),
+    "plugins/message.js": () => Promise.resolve().then(() => (init_message(), message_exports)),
     "plugins/ai-edit.js": () => Promise.resolve().then(() => (init_ai_edit(), ai_edit_exports)),
     "plugins/demo.js": () => Promise.resolve().then(() => (init_demo(), demo_exports)),
     "plugins/visitor-drafts.js": () => Promise.resolve().then(() => (init_visitor_drafts(), visitor_drafts_exports)),
     "plugins/source.js": () => Promise.resolve().then(() => (init_source2(), source_exports))
   };
-  var PLUGIN_ORDER = ["visitor-drafts", "richclay", "indicator", "sortable", "undo", "quickcrop", "upload", "people", "cms", "sync", "live", "wire", "ai-edit", "demo", "source"];
+  var PLUGIN_ORDER = ["visitor-drafts", "richclay", "indicator", "sortable", "undo", "quickcrop", "upload", "people", "cms", "sync", "live", "message", "wire", "ai-edit", "demo", "source"];
   var IMPLIES = { cms: ["quickcrop", "upload"], "ai-edit": ["wire"] };
   function parseCsv(params, key2, enabled, apply2) {
     const raw = params.get(key2);
     if (!raw) return;
-    for (const token of raw.split(",")) {
-      const name = token.trim();
+    for (const token2 of raw.split(",")) {
+      const name = token2.trim();
       if (!name) continue;
       if (!PLUGIN_PATHS[name]) {
         console.warn(`clayjs: unknown plugin "${name}"`);
@@ -47848,6 +47981,8 @@ ${t}` : `"use strict"; return (${t});`;
       clay5.people = mod.people;
       clay5.author = mod.author;
       Object.defineProperty(clay5, "me", { get: mod.currentMe, configurable: true, enumerable: true });
+    } else if (path === "plugins/message.js") {
+      clay5.message = mod.message;
     } else if (path === "plugins/wire.js") {
       clay5.wire = mod.wire || mod.default;
     } else if (path === "plugins/ai-edit.js") {